Cyber attack on Victorian court database could expose sensitive cases

Victoria’s court system fell victim to a ransomware assault in which hackers breached a section of the court’s audio-visual archive. 

The cyber attack is suspected to be the work of Russian hackers, according to an independent expert in the field. 

Staff discovered the attack on December 21, approaching the Christmas break, when they found themselves locked out of their computers.

A message displayed on their screens, reading “YOU HAVE BEEN PWND” and instructed them to open a text file.

Within the text file, the hackers threatened to make the stolen files public, and included a dark web address and instructions on how staff could recover the files

A representative from Court Services Victoria (CSV) confirmed the breach, and the possibility that recordings stored in the archive from hearings dated between November 1 and December 21 may have been compromised. 

This raises extreme concerns for the privacy of those involved in sensitive cases, including testimony from witnesses which may have been accessed or stolen. 

CSV is attempting to notify people whose court appearances may have been compromised by the hack and has arranged a contact centre for those who believe they may be affected.

It is believed that only hearings from between November 1 and December 21 were breached, however, it is possible hearings outside this date may also have been impacted.

CSV chief executive Louise Anderson apologised for the distress caused to those affected.

“CSV took immediate action to isolate and disable the affected network and to put in place arrangements to ensure continued operations across the courts,” said Anderson.

“As a result, hearings in January will be proceeding. Maintaining security for court users is our highest priority.”

If you believe you may have been affected by the breach, contact the CSV on the channels below.

Call 03 9087 6116 or email [email protected].